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Abstract 

We consider the problems of determining the feasibility of a linear congru- 
ence, producing a solution to a linear congruence, and finding a spanning 
set for the millspacc of an integer matrix, where each of these problems 
axe considered modulo an arbitrary constant k ^ 2. These problems are 
known to be complete for the logspace modular counting classes coModfcL 
in special case that k is prime [4]. By considering relaxed modular vari- 
ants of standard logspace function classes, related to #L and functions 
computable by UL machines but only characterizing the number of ac- 
cepting paths mod fe, we show that these problems of linear algebra are 
also complete for coModfcL for any constant ^ 2. 

1 Introduction 

Solving a system of linear equations, or determining that it has none, is the 
definitive elementary problem of linear algebra over any ring. This problem is 
the practical motivator of the notions of matrix products, inverses, and deter- 
minants, among other concepts; and relates to other computational problems 
of abelian groups, such as testing membership in a subgroup [1]. Characteriz- 
ing the complexity of this problem for common number systems, such as the 
integers, finite fields, or the integers modulo k is therefore naturally of interest. 

Wc are interested in the difficulty of deciding feasibility of linear congruences 
modulo k (or LCON^) and computing solutions to linear congruences modulo 
k (or LCONXfc) for an arbitrary constant k ~^ 2. This is a special case of the 
problem LCON defined by McKenzie and Cook [1], in which k is taken as part 
of the input, but represented by its prime-power factors p\^p^ '''jfi'-, where 
Cj e O(logn) for each j (one says that each factor p^ is tiny). Setting A; to a 
constant is a natural, if slightly restrictive, special case. 

Arvind and Vijayaraghavan [2] recently defined ModL (a logspace analogue 
the class ModP defined by Kobler and Toda [3]), which is contained in NC^. 
They show that LCON is hard for ModL under P-uniform NC"'^ reductions, and 
contained in L'^°'^'-/poly = L*'-/poly. This is of course in contrast to the problem 
of determining integer-feasibility of integer matrix equations, which is at least 
as hard as computing greatest common divisors over Z; the latter problem is 
not known to be in NC"* for any j ^ 0. Furthermore, Buntrock et al. [4] show — 
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for the special case of k prime that determining the feasibiUty of systems of 
linear equations is complete for coModfcL; where these are the complementary 
classes to the better known classes ModfeL which generalize ®L, corresponding 
to logspace nondcterministic Turing machines which can distinguish between 
having a number of accepting paths which are either zero or nonzero modulo k. 

The above results suggest that the difficulty of solving linear equations over 
integer matrices is strongly governed by the presence and the prime-power fac- 
torization of the modulus involved, and indicates that LCON/c may be partic- 
ularly tractable. Also implicit in Ref. [4] is that LCON^ is coModfcL-hard for 
all fc ^ 2. This suggests the question: for an arbitrary modulus fc, what is the 
precise relationship of the problem LCON^ of deciding the feasibility of linear 
congruences modulo k, to the classes coModfcL? 

We show how the analysis of McKenzie and Cook [1] for the problem LCON 
may be adapted to exhibit a coMod/sL algorithm for LCON^. Using techniques 
similar to those used by Hertrampf, Reif, and Vollmer [5] to show closure of 
the class ModpL under oracle reductions for p prime, we describe a function 
class FULp which is well-suited for describing oracles which may be simulated in 
mod-logspace computations. We describe a recursive construction for a FULpe 
algorithm (for any fixed prime power p'^) to solve the problem LCONNULLpe 
of computing a spanning set for a basis of the nuUspace of a matrix modulo 
p^. This allows us to demonstrate that LCONfc is coModfcL-complete, and both 
LCONXjfc and LCONNULL/e are F-coModfeL-complete, for any constant A; > 2. 

2 Preliminaries 

Throughout the following, /c ^ 2 is a constant modulus, with a factorization 
into powers of distinct primes k = pl^P2^ ' " pT ■ When we consider the case of 
a modulus which is a prime power, we will write p^ rather than k, for p some 
prime and e ^ 1 some positive integer which are independent of the input. 

We consider the complexity of the following problems, which are named in 
analogy to problems considered by McKenzie and Cook [1]: 

Problems. Fix k ^ 2. For an m x n integer matrix A and vector y S 
provided as input, we define the following problems: 

• LCONfc : determine whether Ax = y (mod k) has solutions for x e Z". 

• LCONXfc : output a solution to the congruence Ax = y (mod k), or 
indicate that no solutions exist. 

• LCONNULLfe : output a set Xi, . . . , xjv of vectors spanning the solution 
space of the congruence = (mod k). 

Without loss of generality, we may suppose to = n by padding the matrix A. 

We wish to describe the relationship of these problems to the classes coModfeL 
for fc ^ 2, which are the complements of the better known classes ModfeL defined 
by Buntrock et al. [4]. 

Definition I. The class coModfcL (respectively ModfeL) is the set of languages L 
for which there exists (p S #L such that x £ L ii and only if (p{x) = (mod k) 
(respectively, (p{x) ^ (mod k)). 
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The following results are a synopsis of Ref. [4, Theorem 9]: 

Proposition 1. We may characterize coModfeL as the class of decision prob- 
lems which are log-space reducible to verifying matrix determinants mod k, or 
coefficients of integer matrix products or matrix inverses mod k. 

Proposition 2. For p prime, LCONp is coModpL-complete. 

Buntrock et al. also characterize the classes coModfeL in terms of the prime 
factors of k, and show closure results which will prove useful. The following are 
implicit in Lemma 5, Theorem 6, and Corollary 7 of Ref. [4]: 

Proposition 3 (normal form). Let k = p'\P^ ■ ■ - p^ be the factorization of 

k 2 into prime powers p^^ . Then L £ coMod/jL if and only if there are 
languages Lj e coModj,^. L such that L = Li fl • • • flL^. In particular, coModfeL = 
coModpip2...p^L. 

Proposition 4 (closure under intersections). For any fc > 2 and languages 
L, L' e coModfcL, we have LDL' G coMod/jL. 

Proposition 5 (limited closure under complements). For any prime p and 
1, we have coModpeL = coModpL = ModpL = ModpeL. 

A system of linear congruences mod k has solutions if and only if it has solutions 
modulo each prime power divisor of k. Wc then have LCONfc G coMod/jL 
if and only if LCONpe g coModpeL = coModpL by Proposition 3. (In fact, this 
suffices to show that LCON^ e coModfcL for all square-free integers k ^ 2.) 

Wc sec from Propositions 2 and 5 that the case of a prime modulus is spe- 
cial. For p prime, Buntrock et al. also implicitly characterize the complexity of 
LCONXp and LCONNULLp. We may describe the complexity of these func- 
tion problems as follows. For a function f{x) : S* ^ E* and x E Y,* , let |/(a;)| 
denote the length of the representation of f{x); and let f{x)j denote the j*'^ 
symbol in that representation. Following Hertrampf, Reif, and Vollmer [5], for 
a function / : E* ^ E* on some alphabet E, and for some symbol • ^ E, we 
may define the decision problem 



Abusing notation, we write f{x)j = • in case |/(a;)| < j. We extend this defini- 
tion to partial functions / by asserting (x, j, b) G bits(/) only if x G dom(/). 

Definition II. The class F-coMod/jL is the set of (partial) functions / such that 
|/(a;)| G poly(|a;|) for all x G E*, and for which bits(/) G coModfeL. (We define 
the class FModfeL similarly.) 

Then Ref. [4, Theorem 9] also implicitly shows: 

Proposition 6. For p prime, the problems LCONXp and LCONNULLp are 

f-coModpL-complete. 

In Section 3, we describe two additional function classes which are natu- 
ral when considering modular logspace computation. Relationships between 
these classes in the case of prime-power modulus will allow us to easily show 
in Section 4 that in fact LCONXpe, LCONNULLp. G F-coModpL for all prime 
powers p^. These results then naturally extend to all moduli A; ^ 2, so that 
LCONXfc,LCONNULLfc G F-coModfeL, with LCONfc G coModfeL following as 
a corollary. 



bits(/) = 



b) 



either j < |/(a;)| and b = f{x)j 
or j > \ f{x)\ and b = • 
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3 Natural function classes for modular logspace 



We now introduce two classes for counting classes in logarithmic space: a mod- 
ular analogue of #L, and a class of function problems which is naturally low for 
ModftL and coModfeL. We describe the relationships of these classes to FModfeL 
and F-coModfeL, and to each other in the case of a prime modulus. 

Definition III. The class #Lfe is the set of functions / : S* — )• Z/fcZ such that 
f{x) = ip{x) + kZ for some function ip G #L. 

Note that #Lfc inherits closure under addition, multiplication, and constant 
powers from #L; it is closed under subtraction as well, as M—N = M+{k—l)N 
(mod k). We may then rephrase Proposition 1 as follows: 

Proposition 7. Evaluating matrix determinants modulo k, coefficients of prod- 
ucts of integer matrices modulo k, and coefficients of inverses modulo k of in- 
teger matrices, are complete problems for #Lfc. 

Similar containments hold for each of the problems listed in Rcf. [4, Theorem 9]: 
any decision problem in coModfeL (such as the complete problems listed by 
Buntrock et al.) consists of comparing some function / e #Lfe to a constant or 
an input value. Thus we trivially have: 

Lemma 8. For any fc > 2, #Lfe C F-coModfeL. 

We may adopt the common conflation between equivalence classes a + fcZ S 
l/klj and integers ^ a < fc, in which case we may instead require / € #L/j 
to satisfy < f{x) < k and f{x) = ip{x) mod k for some (p G #L. This will 
allow us to consider logspace machines which compute #L/j, functions on their 
output tapes. We will be interested in a particular sort of nondeterministic 
logspace machine which is suitable for performing computations as subroutines 
of coModfeL machines: the main result of this section is to describe conditions 
under which it can compute functions in #Lfe. 

Definition IV. A FUL^ m,achine computing a (partial) function / is a nonde- 
terministic logspace Turing machine which (a) for inputs x e dom(/), computes 
fix) on its output tape in some number (p{x, f{x)) = 1 (mod k) of its accepting 
branches, and (b) for each y ^ f{x) (or for any string y, in the case x ^ dom(/)), 
computes y on its output tape on some number (p{x, y) = (mod k) of its ac- 
cepting branches. We say that / e FUL/j if there exists a FULfe machine which 
computes /. 

If we replace the relation of equivalence modulo k with equality in the defi- 
nition of FUL/c above, we obtain a class FUL of functions computable by nonde- 
terministic logspace machines with a single accepting branch. This latter class 
is analogous to the class UPF described in Rcf. [6], which is in effect a class of 
functions which may be computed by a nondeterministic polynomial time Tur- 
ing machine as a subroutine without affecting the number of accepting branches 
of that machine. Modulo k and in logarithmic space, this is the significance of 
the class FUL/j. Note that in many branches (perhaps even the vast majority 
of them), what is written on the output tape of a FULj, machine U may not be 
the fimction f{x) which it "computes"; but any result other than f{x) which U 
is meant to compute, cannot affect the number of accepting branches modulo k 
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of any machine which simulates U directly, e.g. as a subroutine. These "incor- 
rect results" may therefore be neglected for the purpose of counting accepting 
branches modulo fc, just as if all accepting branches of U (of which there are 
not a multiple of k) computed the result f{x) on the output tape. 

In this sense, the closure result ModpL'^°'^p'- = Mod^L for p prime shown by 
Hertrampf, Reif, and Vollmer [5] may be interpreted as saying that the charac- 
teristic function of any L € ModpL may be computed by a FULj, machine; and 
so a ModpL oracle can be directly simulated by a Mod^L machine, by simulating 
the corresponding FULp machine as a subroutine. Our interest in the function 
class FULfe is for essentially the same reason, i.e. an oracle for computing any 
function / G FUL^ can be substituted with a simulation of the FUL^ machine 
itself in the same manner: 

Lemma 9. ModfcL™'-<= = ModfeL, coModfeL''U'-, ^ coModfeL, and FUL^^'"" = 
FUU for all k ^ 2. 

The proof is essentially the same as that for the oracle closure result of Ref . [5] , 
of which this Lemma is a natural extension. From simple number-theoretic 
considerations, the classes FULfe have other properties which are similar to those 
of coModfcL: 

Theorem 10. Let k — Pi^P2^ ■ ■ - pi'' be the factorization of k ^ 2 into prime 
power factors . Then FUL^ = FULp^ n FULp^ H • • • fl FULp^, and in particular 
FUL/; = FULp^p2-p<- 

Proof. Throughout the following, let k — piP2 ■ ■ ■ pe be the largest square-free 
factor of k. We first show FUL^ = FULp^n • • • fl FULp^. Suppose / G FULp^ for 
each 1 ^ j ^ i, and is computed by some FULp^. machine Uj in each case. Let 

7 = k/pi + k/p2 H h K/pe . (2) 

For each prime pj, all of the terms in the right-hand sum are divisible by pj 
except for the j"^ term. Then 7 is coprime to pj for each j, and so is also coprime 
to K. Let /3 = 7~^ (mod k), and consider the machine U' which performs the 
following: 

1. Nondeterministically write some index 1 ^ j ^ £ on the work tape. 

2. For each such j, nondeterministically select some integer ^ q < /Sn/pj. 

3. In each branch, simulate Uj on the input x, accepting if and only if Uj 
accepts. 

For any string y G T,* different from f{x), the number of branches in which 
Uj accepts is mjpj for some rrij S N; and so U' has mj^K branches where j is 
written on the work tape and y is written on the output tape. Summing over 
all we find that any y 7^ f{x) is written on the output tape in a number of 
branches which is a multiple of k. Similarly, for the case y = f{x), the number 
of branches in which Uj accepts is mjPj + 1 for some mj G N; and so U' has 
mjf3K + iSn/pj branches where j is written on the work tape and f{x) is written 
on the output tape. Summing over all j and neglecting multiples of k, we have 
+ ••• + n/pi) =^7=1 (mod k) branches in which f{x) is written 
on the output tape; thus U' is an FUL„ machine computing /. The converse 
containment FUL^ C FULp for each 1 ^ j ^ £ is trivial. 
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It remains to show that fUL^ C FULfe, the reverse containment again being 
easy. Let U' be a FUL„ machine computing a function / : S* — )• S* with length 
bounded above by |/(a;)| < N{x) € poly(|x|). Suppose N{x) G 0(log|a:|): we 
may then construct a FULfe machine U" which computes / by simply performing 
k/K consecutive independent simulations of U', recording the outcome of each 
simulation on the work tape. For each 1 < j < k/n, in any given computational 
branch, let fj{x) be the string computed by the j'^ simulation of U'. If any 
of the simulations produce a different output {i.e. if fhix) ^ for any 

1 ^ h,j < k/n) or if any of the simulations rejected the input, U rejects. 
Otherwise, U writes the string <pi(x) agreed upon by the simulations to the 
output tape. More generally, if N{x) € w(log |x|), then fix some L e 0(log |a;|), 
and define for each 1 ^ m ^ N{x)/L a. machine which writes the m**^ block 
of L consecutive characters from f{x), padding the end of f{x) with a symbol 
• ^ S if necessary. Rather than perform k/n simulations of U', the machine 
U" performs k/n simulations of each such U^, again writing their outcomes 
(excluding any instance of the symbol • ^ E) to the work tape if and only if 
each simulation accepts and agrees on their output. Once N{x) symbols have 
been written to the output tape, U" accepts unconditionally. 

Let ip{x, y) be the number of computational branches in which U accepts 
with the string y G E* written on the tape: by hypothesis, (p{x, y) = (mod k) 
for each y ^ f{x), and ip{x,f{x)) = 1 (mod k). Similarly, let ipmix,y^'^^) be 
the number of branches in which accepts with y^™) e E^ written on the 
tape for each 1 < r < N{x)/L, and ^{x, y) be the number of branches in which 
U" accepts with y € E* written on the tape. Let M = N{x)/L for the sake of 
brevity. If y = y^^^t/^^' • • • y(^) e E*, then 

$(x,y) = ^,{xj')f^v,{x,y^'^f'^ ... ^M(x,y(^0'=/^ (3) 

as for each y*-™-*, the number of branches in which U" accepts with y*^™) written 
on the output tape is independent of the other substrings y^-'^ for j ^ m, and 
results from k/n simulations of which each produce the substring y^") as 
output. 

Note that ipm{x,Xm) is equal to the number of computational branches in 

which U' writes a string cr <E E* on the output tape in which the m}^ block is 
equal to y'™-*, which is the sum of ip{x,a) over all strings a consistent with the 
substring y("*). By hypothesis, (p{x,a) is a multiple of k except for the single 
case where cr = /(.x), in which case Lp{x, a) = 1 (mod k). Thus (fmix, y^™') = 1 
(mod k) if y*^™' G E-^ is consistent with the m**^ block of f{x); otherwise, 
Vm{x,y^'^^) = (mod k). We then observe the following: 

• Let E = maxj{ej} be the largest power of a prime pj dividing k; then 
E < pf < k/K for any 1 < j < As fc divides =pf ---pf ^ 

we then have (pm(x, y^"*))*^/" = (mod k) if (pm(a:, y^™') = (mod k). 

• The integers which are congruent to 1 modulo k form a subgroiip of order 
k/K within the integers modulo k; it then follows that (pm(a;, y'™')'^/'^ = 1 
(mod k) if ip{x,y^"^^) = 1 (mod k). 

Taking the product over 1 < m < M, we have ^{x, y) = (mod k) unless each 

substring 

y(™) is consistent with the m*'^ block of f{x), in which case y = /(x) 
and $(a;,y) = 1 (mod k). Thus U" is an FULfe machine computing /. □ 
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The requirement that an FUL/j machine have one accepting branch modulo 
k ahows us to easily relate FULfe to the classes FModfeL and F-coMod/jL: 

Lemma 11. For all k ^ 2, we have FUL^ C FMod^L n F-coModfeL. 

Proof. Let U be a FULfe machine computing / : S* — >■ S*. Consider a non- 
deterministic logspace machine T taking inputs {x,j,b) G E* x N x (S U {•}), 
and which simulates U, albeit ignoring all instructions to write to the output 
tape, except for the j'''^ symbol which it writes to the work-tape. (If 7 > |/(a;)|, 
T instead writes "•" to the work-tape.) Then T compares the resulting symbol 
f{x)j against b, accepting if they are equal and rejecting otherwise. Then the 
number of accepting branches is equivalent to 1 modulo k if f{x)j = 6, and is a 
multiple o{ p otherwise, so that bits(/) G Mod^L. To show bits(/) G coModfcL, 
we may consider a machine T' which differs from T only in that it rejects if 
f{x)j = b, and accepts otherwise. Thus FULfe C FModfeL n F-coMod^jL. □ 

This identifies FULfe as an important subclass of the existing logspace-modular 
function classes. For prime-power moduli, we may sharpen Lemma 11 to obtain 
a useful identity: 

Lemma 12. For any prime p and e ^ 1, FULpe = FModpL = F-coModpL. 

Proof. By Proposition 5 and Lemma 10, it suffices to prove FULj, = FMod^L for 
p prime. For / € FModpL, we may construct from the ModpL machine T which 
decides bits(/) a family of machines T^j, (for each j G N and 6 G S U {•}), each 
of which writes b on its output tape and deciding whether {x,j,b) G bits(/) 
on an input x G T,* . Without loss of generality, as in [5, Corollary 3.2] each 
machine T^ f, accepts on a number of branches ip{x,j,b) = 1 (mod p) if case 
f{x)j = b, and (f{x,j,b) = (mod p) otherwise. 

We form a FULp machine XJj computing f{x)j by taking the "disjunction" 
of the machines Tj.t over all 6 G SU {•}: i.e. JJj branches nondcterministically 
by selecting b G SU{»} to write on the work-tape and simulates Tj,bj accepting 
with one branch mod p if and only if 6 = f{x)j and accepting with zero branches 
mod p otherwise. Civcn some upper bound |/(a;)| ^ N{x) G poly(|a;|), we then 
construct a FULp machine U to compute f{x) by simply simulating TJj for each 
1 ^ i ^ N{x) in sequence, writing the symbols f{x)j individually on the output 
tape; accepting once it cither computes a symbol f{x)j = • (without writing • 
to the output) or the final iteration has been carried out. □ 

Lemma 12, together with Lemma 9, may be taken as re-iterating the closure 
result of Ref. [5] explicitly in terms of function classes. The importance of this 
result to us is in the following consequences, which follow from Proposition 8 

and Lemma 9: 

Corollary 13. For any prime p and e ^ 1, #Lpe C FULp. 

Corollary 14. For any prime p and e ^ 1, coModpL = coModpL. 

The former result states that we may explicitly compute functions in #L (albeit 
up to equivalence modulo p^) on the work tape, as subroutines in decision 
algorithms for coModpL; this allows us to simulate logspace counting oracles 
modulo in coModpL. In the following section, we use this to describe an 
algorithm for LCONNULLpe in F-coModpL by a similar analysis to McKenzie 
and Cook [1]. By standard techniques, we may then demonstrate containments 
for LCONfc, LCONNULLfe, and LCONXfc in terms of coModfeL. 
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4 Solving congruences and nuUspaces mod k 



We return to the motivating problems of this article. We let A be an nxn integer 

matrix and y G Z" which are provided as the input to LCONfc or LCONXit; and 
for LCONNULLfc, we consider an n x n matrix B. Without loss of generality, 
the coefficients of A and y, or of B, are non-negative and bounded strictly 
above by k (as reducing the input modulo k can be performed in NC^). We 
essentially follow the analysis of Ref. [1, Section 8], which reduces solving linear 
congruences to computing generating sets for nullspaces modulo the primes pj 
dividing k. The technical contribution of this section is to show that the latter 
problem can be solved for prime powers via a reduction to matrix multiplication 
together with modular counting oracles from #Lpe for prime powers p^. 

4.1 Computing nullspaces modulo prime powers 

We consider an NC^ reduction to matrix inversion and iterated matrix products 
modulo p^, in a machine equipped with a #Lpe oracle to compute certain matrix 
coefficients. As we note in Proposition 7, computing individual coefficients of 
matrix inverses and matrix products are complete problems for F-coModpL, 
and Corollary 14 implies that this class can simulate #Lpe oracles. The NC^ 
reduction itself is essentially the same as that of McKenzie and Cook [1] , which 
we may summarize as follows. 

The prime modulus case. First, consider the case e = 1, which as we note in 

Section 2 is solved by Buntrock et al. [4, Theorem 9]. For an n x n integer 
matrix B, we may reduce the problem of computing a basis of null(_B) mod p 
to rank computations and matrix inversion using the techniques of Borodin, 
von zur Gathcn, and Hopcroft [7, Theorem 5]. This involves testing the ranks 
of a nested collection of sub-matrices of B, to determine a subset of columns 
forming a basis for img(_B); the reduction from nullspaces is a truth-table re- 
duction, which for the ultimate reduction to coModpL means that we must use 
Proposition 4 (to enable conjunctive reductions) and Proposition 5 (to allow dis- 
junctive reductions). Computing the rank of a matrix modulo a prime (i.e. in 
the field ¥p) may be; rciduced to computing characteristic polynomials of matri- 
ces in Fp(t) for a formal indeterminate r using a result of Mulmuley [8]; this 
may be reduced to iterated matrix products over Fp(t) by a construction of 
Berkowitz [9], where the coefficients of the matrices arc all cither constants or 
drawn from the coefficients of the matrix M. By deriving a suitable bound on 
the degrees of the polynomials over t involved in these iterated matrix prod- 
ucts, one may substitute the polynomial coefficients by polynomial-size Toeplitz 
matrix blocks [10], thereby reducing the iterated matrix product over Fp(r) to 
one over ¥p. 

Recursive reduction for higher powers of primes. The remainder of the NC^ 
reduction consists essentially of Ref. [1, Lemma 8.1] which put LCONNULL 
(for a variable modulus with magnitude at most linear in n) in NC^: in our case, 
we reduce LCONNULLpe to LCONNULLp together with matrix products and 
access to oracles for computing coefficients of certain matrices. Inducting on 
1 ^ i ^ e, suppose that we have a generating set V^*-*, . . . , V^^-* over Z/p^Z for 
the nuUspace of B modulo p*. Certainly any solution to Bw = (mod p*+^) 
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must also be a solution to 5w = (mod p*) as well; then we may decompose 
such w modulo p'^ as a linear combination of the vectors Vj'*'' , 

w = «i ^ + . . . + un,-v''n] + P*w (4a) 

for some w € Z"; or more concisely, 

w = y(*)z , (4b) 

where we define the block matrices V^*-*^ = [ V^*'*'' V2*-' • • • V^^^ | p*/ ] and z = 
\ui U2 ■ ■ • I w Z''^*+"'. To consider the additional constraints imposed 
by Bw = (mod p*^"'^), consider a decomposition B = Bt + p*Bt, where the 
coefficients of Bt are bounded between and p'. We then have 



/ Nt 



StV/*^ + p%Y^*^] j +p'BtW 



Nt 



B UjVj'^j + p*w = (mod p*+^) . (5a) 



As the vectors -BtV,-*' have coefficients divisible by by construction, we may 
simplify to 




+ Btw = (mod p) , (5b) 



or somewhat more concisely. 



bWz = (modp), (5c) 

where we define 

m = [bf) b(*) ••• bj;) I B,], for bf = i?,V^(V + (6) 

and where z is as we defined it above. To find not just one vector w but a 
set of generators Vi*^^\ . . . , V^^'^^'' over Z/p^Z for null(-B) mod p*~^^, it suffices 
to find a generating set zi, . . . , zjVj^j for the nullspace of B^*^ mod p, and then 
set V^*"''"'^-' = l/'^*^z;i. Note that the nullspace of B^*) modulo p over Z/p'^Z will 
contain many vectors which are equivalent mod p, but at most Nt+n equivalence 
classes; we may then without loss of generality select vectors zi = pei, Z2 = pe2, 
. . . , zatj = pe^Vt, and choose the remaining vectors Zh representing non-trivial 
vectors in null(-B'-*-') mod p to have coefficients bounded between and p. We 
thus obtain Nt+i ^ 2Nt+n vectors over Z/p^Z which span null(B) modulo p*'^^. 
Because LCONNULLp G FULpe, which is low for coModpL, we have reduced to 
computing matrix products involving the matrix B^*^ in a coModpL machine. 



Matrix products in oracle models. The natural approach outlined in Bun- 
trock et al. [4] for evaluating the coefficients of an iterated matrix product 
M1M2 ■ ■ ■ Afpoiy(„) modulo k — i.e. as a #Lfc function — requires access to indi- 
vidual coefficients at any given step of the algorithm. One simulates a branching 
program with nondeterministic choices, in which the matrices act as transition 
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functions on the row-positions of a vector G (Z/ZcZ)", to obtain a new vector 
Vt-+i. To evaluate the (ft, j)-coefficient of the matrix product, we count the 
number of computational branches which end at a the h^^ row, given an initial 
vector Vp = : we do this by accepting all branches which end with the row po- 
sition h, and rejecting all others. This approach requires only non-deterministic 
selection of row-positions, logarithmic space to record the row-positions, and 
the ability query individual coefficients of the matrices being multiplied. When 
the matrices Mj are specified as part of the input, or more generally for any 
problem reduced projectively to matrix products (meaning that the matrices 
involved have coefficients which are either constants or taken from the input 
tape), the algorithm to evaluate the matrix products is straightforward; more 
generally, for any class C which is low for coModfcL {e.g. C = FOLh), we may 
compute any matrix product in coModfeL where the coefficients are obtained 
from the input by may be obtained by queries to C oracles. 

We may use these observations to reduce LCONNULLpc to matrix prod- 
ucts modulo p*^. In the recursive reduction for prime powers outlined above to 
LCONNULLp, every step is projective except for the matrix multiplications, 
and the problem of finding null spaces modulo p for the matrices B*^*^ (which 
are not themselves part of the input). The columns of B^*^ are either columns 
of Bt (which are themselves the result of integer division of columns of B by p*, 
this dividend being bounded by a constant) or are integer vectors of the form 
BY'^'-^ /p*-. The coefficients of BV*^*^ are computable as a matrix product, and 
thus may be computed in #Lpe from B itself and V^*^; provided a #Lpe oracle, 
we may then obtain those coefficients and divide them by p* in NC\ By Corol- 
lary 13, we have #Lpe C FULp, which is low for coModpL. We therefore have 
a coModpL-reduction from computing a basis for null(B) modulo p*+^ to com- 
puting the basis V^*-*, . . . , vj^^ modulo p*. We may then carry out the recursive 
reduction to obtain a FULpe -reduction from LCONNULLpe to iterated matrix 
products, via LCONNULLp; the number of vectors vj^^ in the generating set 
will, by induction, he N^, ^ n + 2n -\ -|- 2^~^n < p'^n e 0{n). 

An important feature the recursive reduction described above is that the 
exponent e is itself a constant. The #Lpe oracles to compute coefficients of 
Bi<'- 1) require access to the coefficients of vectors V^*^^ , which in turn will require 
#Lpe oracles to compute coefficients of B^'^~'^\ and so on. This is a sequential 
reduction, and the space resources can be described straightforwardly using a 
stack model of the work tape: each nested #Lpc oracle is simulated as a FULpe 
subroutine which is allocated 0(log|B|) = 0(log(n)) space on the tape (where 
\B\ e 0{n^) is the size of the input matrix after reduction modulo p^), and 
which makes further recursive calls to FULpe subroutines which do likewise, 
down depth at most e. The space resources then scale as 0(elog(n)); in our 
setting of a constant modulus, the space requirements are then 0(log(n)). 

Consider a nondeterministic logspace machine with alphabet S = S U {•} 
for E = {0, ...,p^ — 1}. Using a FULpe -reduction to reduce LCONNULLpe 
for prime powers p'^ to computing coefficients of matrix products, we may test 
equality of individual coefficients against some reference value 6 € S provided 
as input. Therefore: 

Lemma 15. LCONNULLpe e F-coModpL. 
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4.2 Completeness results for Eirbitrciry constant moduli 

The above sufEees to show that LCON^, LCONXfc, and LCONNULLfe are com- 
plete problems for coMod^;L and F-coModfcL, as we now show. We consider non- 
deterministic logspace machines operating on an alphabet Sfe = I]/;U{»}, where 
Sfe is the set of integers ^ r < fc. For the function problems LCONNULL^ 
and LCONXfc, we wish respectively to compute 

• a function A/fc : — )■ S^" for N € 0{n) such that J\fk{B) is a sequence 
of vectors (Zo, Zi, . . . , Z^-i) which generate null(B) in Z/kZ; and 

• a partial function ■ 5]"^+" ^ E" such that {A,y) G dom(<Sfc) if and 
only if there exists a solution x to the system Ax = y (mod k), in which 
case <Sfe(^, y) is such a solution. 

Following [1, Lemma 5.3], we may reduce LCONfe and LCONX^; for ^ 2 to 
LCONNULLfe, as follows. Suppose = y (mod k) has solutions. Consider 
B = [A\y]: then there are solutions to the equation Sx = (mod k). In 
particular, there will be a solutions x = x ® a;„+i in which Xn+i = —1, and 
more generally in which Xn+i is coprime to k. Conversely, if there is such a 
solution X to B5t = (mod k), we may take a = —x~^i (mod k) and obtain 
A(ax.) = —axn+iy = y (mod k). To determine whether Ax = y (mod k) 
has solutions, or to construct a solution, it thus sufRces to compute a basis for 
the nullspace of B, and determine from this basis whether any of the vectors 
X G null(i?) have a final coefficient coprime to k: if so, the remainder of the 
coefficients of x may be used to compute a solution to the original system. 

In the special case k = oi a. prime power, coprimality to k simply entails 
that k is not divisible by p. To solve LCONpc and LCONXpe, we compute 
individually the final coefficients of the vectors (Zo,Zi,Z2, . • .) = Mpe{B) for 
B = [A\y], searching for an index 1 < /i < A^e for which the dot product 
e„+i • Z/j is not divisible by p. Without loss of generality, we select the minimum 
such h: the search problem can be formulated as a truth-table reduction on 
divisibility tests of these coefficients by p. Both the reduction and the divisibility 
test are feasible for coModpL; we may suppose that this reduction and test are 
performed by a FULp oracle so that the outcome is explicitly recorded on the 
work tape in a single branch mod p. If there is no such index h, we indicate that 
no solution exists by accepting unconditionally, indicating either a no instance 
of bits(iSfe) or of LCON^ on a coModpL machine. Otherwise, there exists a 
solution to the linear congruence. To indicate for LCONpe that {A, y) is a yes 
instance on a coModpL machine, we reject on all computational branches to 
make the number of accepting branches zero modulo p. To solve bits(iSfc), we 
compute the minimum index h and the coefficient e^_|_jZ?i, which we store on 
the work tape in binary. We then compute a = — a^^^i (modp*^), and then 
obtain the coefficients of aZ^,, which we compare to input coefficients, rejecting 
(to indicate a yes instance) if the coefficients match, and accepting (to indicate 
a no instance) otherwise. Therefore: 

Lemma 16. LCONpe g coModpL anrf LCONXpe g F-coModpL. 

As we remarked in Section 2, we may solve LCON^ for arbitrary moduli 

k = p\^p'^ ■ ■ -Pff by reduction to the problems LCON^e^ for 1 ^ j ^ £; the 
same is true for LCONX^ and LCONNULLfe. Let qj = p^' for the sake of 
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brevity. For LCONfc, wc simply have LCON^. = LCON,i n ••• H LCON,^. 
For LCONNULLfc and LCONXfc, let congbits(/, g^) be the decision problem 
of determining for inputs {x, h, 6) e SJl x N x S/; whether x G dom(/), and (this 
being granted) whether either f{x)h = b (mod qj) for 6 ^ • or f{x)h = • = b. 

• Clearly bits(5fe) is the intersection of the problems congbits(5fc, gj) for 
1 ^ j ^ ^- We may show congbits(5fc, qj) S coModg^ L for each 1 ^ j ^ £, 
as follows. For 6 e Sfc, we may expand b in binary on the work tape and 
evaluate its reduction ^ &' < qj modulo a given prime power qj: for 
& = • we simply let 6' = • as well, so that b' S T,q. . We perform a similar 
reduction for each coefficient in (^, y) to obtain an input {A',y') with 
coefficients in T,q. . Then we may simulate a coModp^. L machine to decide 
whether {{A' ,y'), h,b') £ bits(5g^). Thus bits(5fc) G coMod^L. 

• To show bits(A/'fc) e coModfcL, we follow the reduction of McKenzie and 
Cook in Ref. [1, Theorem 8.3]. Given vectors X^'^\ . . . , X^^' spanning the 

nullspace of B modulo qj for each 1 ^ j ^ £, the nuUspace of B modulo k 
is spanned over the integers modulo k by the vectors 

(We omit the vectors keh included by Ref. [1] , as these are congruent to 

in Z/A;Z.) Let Z/^ be the list of such vectors, for < /i < A^i H \-Nf. we 

define Nk for k divisible by more than one prime to produce this sequence 
of vectors as output. Notice that each Z/i is 

— congruent to modulo q^ for every j 7^ 1 for ^ /i < A^i , 

— congruent to modulo qj for every j ^ 2 iov Ni ^ h < Ni+ N^, and 

— generally, congruent to modulo qj for every j > 1, except for the 
index j for which M,_i ^ h < Mj, where for the sake of brevity we 

write = YlUi ■ 

We may then reduce bits(A/'fe) to testing the congruence of coefficients 
of Zh with modulo qj for all prime powers for which h < Mj_i or 
h ^ Mj, and testing congruence with the coefficients of ^xj^^j^^j^ oth- 
erwise. These congruences modulo each prime power qj can again be eval- 
uated in coModg^. L algorithm for congbits3(M;), using the NC^ reduction 
to bits(A/'q^) as above. 

The above reductions suffice to show: 

Theorem 17. For all k ^ 2, we have LCONNULL^, LCONXfe € F-coModfeL 
and LCONfc e coMod/jL. 

Finally, note that one may also LCONp^. to LCONfc, for any prime pj dividing 
k, by considering the feasibility of the congruence 

{kA/pj)x = ky/pj (mod fc), (8) 

which is equivalent to Ax = y {mod Pj). By Propositions 2-4, all problems 
in LCONfc may be reduced to solving some instances of LCONp^. for each 
1 ^ j ^ £: then LCONfc is coModfcL-hard. Similar remarks apply to LCONXfc 
and LCONNULLfc. Therefore: 

Theorem 18. For all k > 2, LCONfc is coModk\--complete, and LCONNULLfc 
and LCONXfc are F-coModk\--complete. 
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5 Further Remarks 



The above analysis was motivated by observing that the reduction of McKenzie 
and Cook [1] for LCONX and LCONNULL (which take the modulus k as input, 
as a product of prime powers p^^ € 0{n)) was very nearly a projective reduction 
to matrix multiplication, and that it remained only to find a way to realize 
the division by prime powers involved in the reduction to LCONNULLp. 
By showing that logspace counting oracles modulo p*^ could be simulated by 
a coModpL machine, using the function class FULfe as a notion of naturally 
simulatable oracles for the classes Mod/jL and coModfeL, the containments of 
Theorem 17 became feasible. 

Extending the definition of bits(/) to accomodate partial functions in the is 
crucial to our result that LCONX^ <E F-coModfcL, in the sense that there is no 
obvious way to extend the algorithm to decide bits(5'fe) for any unambiguous 
extension of <Sfc to infesible systems of equations, e.g. by accepting on some 
symbol "!" if and only if there is no solution to a congruence provided as 
input. Such an algorithm would be a signficant result, as it would follow that 
LCONfc G ModfcL, thereby showing that this class is closed under complements. 

In the recursive reduction for LCONNULLpe, the fact that e G 0{1) is es- 
sential not only for the logarithmic bound on the work tape, but also for the 
running time on a coMod^L machine to be polynomial. The FULp machines 
used to implement the #Lpe oracles, from the constriictions of Theorem 10 and 
Lemma 12, implicitly involve many repeated simulations of coModpL machines 
{P^/P = P^~^ times each) to decide equality of counting functions with residues 

^ r < p'^: this contributes to a factor of overhead growing quickly with e. 
Therefore our results are mainly of theoretical interest, characterizing the com- 
plexity of these problems with respect to logspace reductions. It is reasonable 
to ask if there is an algorithm on a coModpL machine for LCONNULLpe, whose 
running time grows slowly with e. 

Given the natural role of the class FULpe in simulating of #Lfc oracles, one 
might ask e.g. whether the characteristic fmiction of LCON^ is contained in 
FULfe. It is interesting to consider the difference between such potential con- 
tainments, and those proven as Theorem 17. We first note an alternative char- 
acterization of coModfcL: 

Proposition 19. For every k ^ 2, L E coModj,L if and only if there exists 

(p G #L such that x Cz L if an,d only if Lp{x) is coprime to k. 

Proof. For k = p^\ p^' ■ ■ ■ P^l as usual, we have L G coModfeL if and only if 

1 = Z/i n ^2 n • • • n Z/£ for languages Lj G coModp^. L = Modp^ L by Propositions 3 
and 5. Let Ti,....T(^ be nondctcrniinistic logspace machines such that Tj 
accepts on input x with a number of branches not divisible by pj if x G , and 
with zero branches modulo p^-^ otherwise. Using a similar construction to that 
of Lemma 10 for the square-free case, we may obtain a single nondeterministic 
logspace machine T which accepts on a number of branches not divisible by 
Pj if X G Lj, and on a number of branches equivalent to mod pj otherwise. 
If a; G i, then the number of branches on which T accepts is not divisible by 
any prime pj, which means that it is coprime to k; otherwise, there exists some 
prime pj which divides the number of accepting branches, so that the number 
of branches is not coprime to fc. □ 
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This, in turn, suggests a characterization for F-coModfcL in the same vein as the 
definition of FULfe: 

Proposition 20. For all k ^ 2, F-coModfeL consists of those (partial) functions 
f computable by a nondeterministic logspace machine which (a) for inputs x G 
dom(/), computes f(x) on its output tape in some number ip{x,f{x)) of its 
accepting branches which is coprime to k, and (b) for each output string y ^ 
f{x) (or for any string y, in the case x ^ dom(/)j, computes y on its output 
tape on some number (p{x,y) such that gcd(^(p{x,y),k) > 1. Furthermore, we 
may require without loss of generality for all y G S* that either ip{x,y) = 1 
(mod k), or gcd (^(p{x,y),k) is a product of some of the maximal prime powers 
p^' which divide k. 

Proof. Let k = Pi^P2^ ■ ■ ■p'g' be the factorization of k into its prime power fac- 
tors. For / G F-coModfeL, consider the coModfeL machine T for deciding bits(/) 
with the characteristics described in Proposition 19. Using a construction sim- 
ilar to tliat of Lemma 12, we may construct machines Ch which simulate T on 
inputs (.T, /i, 6) for each h e SU{»}, writing the symbol b on the output tape. For 
X ^ dom(/), each possible output is written to the output tape in some num- 
ber of branches which has a non-trivial common divisor with k. Otherwise, for 
X e dom(/), this machine writes f{x)h on the tape in some number of branches 
coprime to fc, and every b ^ f{x)h on the tape some number of branches which 
has prime divisors in common with k, by hypothesis. Still following Lemma 12, 
consider a machine C simulating each C/i in turn for 1 ^ /i ^ A'^(a;) up to 
some upper bound |/(a;)| < N[x) € poly(|x|) or until we encounter symbols 
f{x)h = •. A string y G Ti* written to the output tape occurs in a number 
of accepting branches which is coprime to k if and only if each character of y 
occurs a number of times coprime to k, which is to say if y = f{x). 

The stricter characterization of the number of branches in which each y = 
f{x) 01 y f{x) is accepted may be obtained as follows. By Proposition 3, 
consider functions e F-coModp^ L such that bits(/) = bits(/i) n • • • fl bits(/^). 
Using Theorem 10 and Lemma 12, consider FULp^.=j machines XJj which compute 
fj for each 1 ^ j ^ £. By a similar construction to Theorem 10, we may obtain 
a machine U which writes f{x) on the tape in a mimber of branches which is 
equivalent to 1 modulo every prime power p'j' , and which writes any y ^ fix) 
on the output tape a number of times which is equivalent to modulo one or 
more powers p'j' (but equivalent to 1 for the other prime powers pjj''). Then 
f{x) is written on the output tape on one branch modulo fc; the other strings 
y fix) occur on the output tape a number of times which is divisible by some 
maximal prime power divisors p'j' , but which is coprime to the other maximal 
prime power divisors p^'^ . 

To show the converse, i.e. that the functions / computable by such logspace 
nondeterministic machines C are indeed in F-coModfeL, simply consider a ma- 
chine T which takes a tuple (a;, h, b) as input, and simulates a machine C as de- 
scribed above long enough to compute fix)h, accepting unconditionally. Then 
the number of branches on which T accepts is coprime to k if and only if 
x e dom(/) and fix)j = b, by construction. By Proposition 19, it follows that 
bits(/) e coModfcL. □ 

The definition of FULfe differs from the above characterization of F-coModfeL by 
the further requirement that, for a FULfe machine computing some function /, 
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output strings y ^ f{x) must occur in zero branches mod k and not just in a 
number of branches which has maximal prime power factors in common with 
k. Thus, we see that Definition IV does not result in a class which is entirely 
different in signficancc from F-coModfeL, even for k composite. 

There is no obvious way to bridge the gap between the definition of FULfc, 
and the characterization of F-coModfeL given by Proposition 19. Of course, 
LCONfe can be solved in FULfe if and only if FUL/j = F-coMod/jL. As FUL^ is 
low for coModfcL, this would imply coModfcL is closed under logspace Turing 
reductions, and that therefore Mod^L = coModfcL. Furthermore, by Proposi- 
tion 3 and Theorem 10, FUL^. = F-coModfeL would imply a surprising collapse of 
logspace mod classes beneath coMod/jL: for any distinct prime divisors Ph,Pj of 
k we would have FModp^L C FModfeL = FULfe C FULp^.= FModpL, and in par- 
ticular Modp^L = Modp^.L. The converse, that Modp^L = ModpT for all primes 
dividing k only if FULfe = F-coModfeL, is trivial. A similar collapse would occur 
even if the characteristic function of LCONfc could be computed in F-coModfeL; 
not only would this indicate that coModfeL is closed under containment, but 
also under oracles, as it would allow simulation of F-coModfeL oracles in a way 
much similar to the simulation of FULfe oracles by coModfeL machines (where 
a collection of branches having the same tape-conents are insignificant if the 
number of branches has prime power divisors in common with k, although not 
necessarily divisible by k). If we suppose that FULfe, FModfeL, and F- coModfeL 
are distinct for any fc ^ 2 divisible by two or more primes, it would be interesting 
to characterize FULfe as a subclass of FModfeL n F-coModfeL. 
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